Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
File:                     2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft (raw, json)
Hash identifier:          razVNN7WYbpQ27QFYjRNOxo1u63pXndXUjg7cS2alaU=
Subject key identifier:   E7:0C:6A:6D:B2:98:C7:25:5F:C3:73:B9:DD:2E:D9:72:47:5C:52:93
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Certificate issuer:       /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial:       593982DB4D20AAD3906E47F8425E71CF4531876C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
Manifest number:          0129
Signing time:             Mon 11 Aug 2025 00:12:36 +0000
Manifest this update:     Mon 11 Aug 2025 00:07:36 +0000
Manifest next update:     Tue 12 Aug 2025 00:24:36 +0000
Files and hashes:         1: 3136382e3232382e3138392e302f32342d3234203d3e20323636303230.roa (hash: WgHjKKnRcPOCOcHBhCCtR4dGRxiBafdGRse0ADt7cGA=)
                          2: 3137302e3234352e3233382e302f32342d3234203d3e20323636303230.roa (hash: wR3va8jKsVNGWlsg37FAbmpwDecH7FxL1wgBCYJBUyw=)
                          3: 3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa (hash: AJ/KXBH0F3Lo+FaEuMWX0v5Ko4hHoAW3z9BgaWSvLvw=)
                          4: 323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa (hash: Y0tFHHqmOfumtLoGnSC4p2sgvFE3tgpxEY3YgdRQX4M=)
                          5: 3137302e3234352e3233392e302f32342d3234203d3e20323636303230.roa (hash: FP49kIC2o9ve5FeQPxjBiciH/Hm67a+98Tf6eJ44ZIQ=)
                          6: 323830343a333933633a3a2f33322d3332203d3e20323636303230.roa (hash: xHWAeA0Cgl76WslKoPxKYeAl4nPfwsN0r2FRwxAm3Hc=)
                          7: 2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl (hash: QU3vlC49UZhOP6zOvBswW3mNSQYFhfQMxXKleRnbyKA=)
                          8: 3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa (hash: NBvspvXpYUCWx/SgDUAz8RsBlUbtVVjXpIPVZMxYAIQ=)
                          9: 3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa (hash: jkoEPVj5CwO+UHZUwS1R8VzH1Md5GDd+v74YV5Y+1eE=)
                          10: 3137302e3234352e3233372e302f32342d3234203d3e20323636303230.roa (hash: rJhXVqLpsYkngwan8Z+HVH8q5X4aOVj3SVdMUso2xGQ=)
                          11: 3137302e3234352e3233382e302f32332d3233203d3e20323636303230.roa (hash: fdfzLPEeWVlNfYGCe0TgP7cK/Jy/inpMxiKv51d8RfI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 00:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:39:82:db:4d:20:aa:d3:90:6e:47:f8:42:5e:71:cf:45:31:87:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
        Validity
            Not Before: Aug 11 00:07:36 2025 GMT
            Not After : Aug 12 00:24:36 2025 GMT
        Subject: CN=E70C6A6DB298C7255FC373B9DD2ED972475C5293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ad:c7:9f:2b:b3:4d:f3:26:e1:2d:14:9e:6d:
                    10:0c:d9:59:89:36:1b:b8:5a:45:b6:4d:83:ff:d4:
                    85:34:0c:8d:d3:0b:63:77:48:9d:8b:4a:c3:bc:78:
                    f7:9a:59:c1:e4:1c:22:db:64:24:69:f8:15:ed:d9:
                    fb:6d:10:dc:b8:e5:4c:8d:7a:72:7b:53:ea:c4:85:
                    6f:02:9f:44:d4:c2:bd:7d:5a:b3:ba:98:8c:ee:bc:
                    6b:f1:41:e6:47:8c:8c:6b:43:2f:3e:0c:46:49:5d:
                    fd:91:29:18:e1:1d:5c:26:bb:56:02:51:59:aa:d0:
                    f8:e8:75:7c:af:2a:90:f0:18:3b:30:d2:a9:b2:72:
                    c0:8c:06:df:9b:c4:cf:00:bc:d4:0e:be:95:f3:d9:
                    81:d0:08:c7:27:73:78:65:89:81:10:6f:87:82:f2:
                    ae:10:3e:65:28:89:55:d2:c4:f7:6d:62:72:1a:b8:
                    6b:61:5d:c6:70:fe:a3:aa:67:56:06:65:da:99:fd:
                    4f:3e:4a:95:8a:af:2d:05:14:98:ce:7b:63:63:e0:
                    0a:06:1b:16:1b:ab:f1:06:2f:00:3b:ab:ac:c0:e8:
                    b2:32:18:9c:0a:9a:da:3d:44:1d:3d:25:db:35:20:
                    15:21:22:b3:8c:5e:6b:d2:2d:0d:d8:28:e8:ca:95:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0C:6A:6D:B2:98:C7:25:5F:C3:73:B9:DD:2E:D9:72:47:5C:52:93
            X509v3 Authority Key Identifier:
                keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e7:3a:e6:4e:61:2d:21:33:3f:1f:36:e3:39:9b:15:0f:3c:
         ce:6a:a0:67:b5:35:18:1f:30:5d:f2:d3:29:32:8e:c5:31:ce:
         90:81:b7:96:69:c8:43:f9:d6:1c:d7:73:47:d8:62:2d:c9:46:
         bd:a8:9e:8d:b3:96:d0:b7:94:26:db:8c:7f:75:34:0b:c2:82:
         06:fb:e5:39:47:64:ce:1a:8b:de:61:ab:b9:a4:38:73:a0:78:
         f3:33:c5:5c:d0:a9:49:0c:77:01:2a:dc:cc:bd:46:ef:26:62:
         bb:7e:27:41:c8:46:7d:ff:87:47:9f:5a:39:f5:65:8a:91:e2:
         5a:6b:ee:9c:98:0d:b0:c6:83:a6:38:73:5a:ee:4b:00:02:2d:
         20:aa:0c:e3:6b:ac:f6:7d:84:6c:93:fa:65:e8:a6:c1:dc:15:
         45:cb:b9:e1:59:47:36:61:35:44:6f:62:a9:20:96:d6:a6:8f:
         d1:cd:cf:af:47:9d:1e:20:cb:e6:38:a6:4b:3e:f7:f7:6e:95:
         a5:bd:50:c5:cf:ef:5a:d9:31:d2:5e:ea:54:6d:d4:ea:b3:f9:
         90:67:84:15:83:89:dd:0f:2e:18:b0:f3:04:47:6c:f7:b5:da:
         24:0e:48:2f:30:6c:94:dd:ad:60:b7:54:3e:da:8b:a3:44:ec:
         5e:96:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:45:38 2025 by rpki-client